Casdoor vs Logto

An open-source Logto alternative with everything included

Logto and Casdoor are both open source with a managed cloud. Logto's cloud has a generous free tier and sells RBAC, organizations, MFA and enterprise SSO as add-ons; Casdoor Cloud gives you a dedicated instance with those features included.

Casdoor and Logto at a glance

CasdoorLogto
Source codeOpen source (Apache-2.0)Open source (MPL-2.0)
Where it runsCasdoor Cloud, or your own servers with Docker or KubernetesLogto Cloud, or self-hosted
PricingFrom $24.17/month billed yearly per dedicated instance, with no per-user fees; self-hosting is freeCloud free tier with 50,000 MAU; Pro from $24 per month plus add-ons
RBAC, organizations, MFA, enterprise SSOIncluded on every planPaid add-ons in Logto Cloud

Information about Logto is from its public website as of October 2026 (Logto on GitHub, Logto pricing) and may have changed. Logto is a trademark of its owner.

Why teams choose Casdoor

No add-ons

RBAC, organizations, MFA and enterprise SSO come with every Casdoor Cloud plan and with the free self-hosted edition.

One IdP for every app

Casdoor is an identity provider over OIDC, SAML, CAS, LDAP and RADIUS, so the same accounts sign in to your own apps, SaaS tools and devices.

A dedicated instance

Casdoor Cloud runs a separate instance and database for each customer, not a shared multi-tenant service.

Authorization included

Casbin RBAC, ABAC and ACL are built in, instead of being left to your code.

When Logto may fit better

  • You want a large free tier on a multi-tenant cloud and need few enterprise features.
  • You prefer a TypeScript codebase you can extend.

Moving from Logto to Casdoor

Export your users from Logto and import them into Casdoor. Casdoor can verify bcrypt, Argon2id, PBKDF2 and salted SHA-256 / SHA-512 password hashes, so imported users can keep their passwords. Then point each app at Casdoor's OIDC endpoints.

Plan a migration with us

FAQ

Frequently asked questions

What's the difference between Apache-2.0 and MPL-2.0?
Both are OSI-approved. MPL-2.0 requires you to publish changes you make to MPL-licensed files when you distribute them; Apache-2.0 doesn't, and includes an explicit patent grant.
Does Casdoor have SDKs like Logto?
Yes. Casdoor has SDKs for JavaScript, React, Vue, Angular, Go, Java, Python, PHP, .NET, Rust, Flutter, iOS, Android and more, and any OIDC client library works too.